Thehackernews

Gogs 0-Day Vulnerability Exploited in Over 700 Instances

First seen 11 Dec 2025, 16:52 UTC • Thehackernews

•94.3

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

A zero-day vulnerability in Gogs, identified as CVE-2025-8110, is being actively exploited, allowing authenticated users to execute remote code. This flaw affects over 50% of public-facing Gogs instances, and as of now, no patch is available to mitigate the issue.

How this analysis works

Attack Flow

Continue Reading

CISA Directs Agencies to Address Gogs RCE Vulnerability Exploited in Zero-Day Attacks Anonymous Researcher Publishes Zero-Day Exploits for Major Software Projects Gogs Vulnerability Allows Remote Code Execution via Path Traversal Critical Zero-Day Vulnerability in Gogs Allows Remote Code Execution Critical Vulnerabilities in Gogs and Jinjava Require Immediate Patching Dutch Authorities Dismantle 17 Million Device Botnet in Major Cybercrime Operation

Gogs 0-Day Vulnerability Exploited in Over 700 Instances

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading